Java 处理 sql in 多条件搜索时 单引号双引号问题

当多条件搜索时：用in 怎么转换

比如 当传过来的参数是一个字符串 ：str="a,b,c"；

用sql ............ in(str)/in("a,b,c")显然是不对的 我们最终需要的是 in('a','b','c')；

这就需要将str:"a,b,c"转成'a','b'，'c'

 

	@Override
	public List<Object> selectJobByToAndT1OfChooseMach(String t0, String t1, String str) throws Exception {
		String sql="";
		StringBuilder sb = new StringBuilder();
        if(str!=""){
        	String as[]=str.split(",");
    		for (int i = 0; i < as.length; i++) {
     		sb.append("'"+as[i]+"'");//拼接单引号,到数据库后台用in查询.
     		if(i!=as.length-1){//前面的元素后面全拼上",",最后一个元素后不拼
     		sb.append(",");
     		}
    	   }
		sql="select jobCode,machCode,mouldCode,jobManager,jobAvailability,quality,jobPerformance,startTime,endTime,jobStatus,goodUnits,scheduledProducedUnits from DBJobProduceStatus where  (machCode in("+str+") and jobStatus='false' and startTime<='"+t1+"' and  now() >='"+t0+"') or (machCode in("+str+") and jobStatus='true' and startTime<'"+t1+"' and endTime>'"+t0+"')";
		sql=sql.replace(str, sb);
		}else{
			sql="select jobCode,machCode,mouldCode,jobManager,jobAvailability,quality,jobPerformance,startTime,endTime,jobStatus,goodUnits,scheduledProducedUnits from DBJobProduceStatus where  (machCode in('') and jobStatus='false' and startTime<='"+t1+"' and  now() >='"+t0+"') or (machCode in('') and jobStatus='true' and startTime<'"+t1+"' and endTime>'"+t0+"')";
		} 
  		  
 		Session session = hibernateTemplate.getSessionFactory().getCurrentSession();
  		List<Object> resultList=session.createSQLQuery(sql).list();
		return resultList;
	}

注：传过来的str是一个字符串:例如：str="a,b,c"；

最终效果是：'a','b','c'